Permitted Uses and Disclosures by BA. (1) Except as otherwise limited in this Agreement, BA may use or disclose PHI to perform functions, activities, or services for, or on behalf of, Covered Entity as specified in the Service Contract, provided that such use or disclosure would not violate the Privacy Rule if done by Covered Entity. (2) Except as otherwise limited in this Agreement, BA may disclose PHI for the proper management and administration of the BA, provided that disclosures are Required By Law, or BA obtains reasonable assurances from the person to whom the information is disclosed that it will remain confidential and used or further disclosed only as Required By Law or for the purpose for which it was disclosed to the person, and the person notifies the BA of any instances of which it is aware in which the confidentiality of the information has been breached. (3) Except as otherwise limited in this Agreement, BA may use PHI to provide Data Aggregation Services to Covered Entity as permitted by 45 C.F.R. 164.504(e)(2)(i)(B). (4) BA may use PHI to report violations of law to appropriate Federal and State authorities, consistent with 45 C.F.R. 502(j)(1).
Appears in 3 contracts
Samples: Hipaa Business Associate Agreement, Professional Services, Contractual Dental Services Agreement
Permitted Uses and Disclosures by BA. (1) Except as otherwise limited in this Agreement, BA may use or disclose PHI to perform functions, activities, or services for, or on behalf of, Covered Entity as specified in the Service Contract, provided that such use or disclosure would not violate the Privacy Rule if done by Covered Entity.
(2) . Except as otherwise limited in this Agreement, BA may disclose PHI for the proper management and administration of the BA, provided that disclosures are Required By Law, or BA obtains reasonable assurances from the person to whom the information is disclosed that it will remain confidential and used or further disclosed only as Required By Law or for the purpose for which it was disclosed to the person, and the person notifies the BA of any instances of which it is aware in which the confidentiality of the information has been breached.
(32) Except as otherwise limited in this Agreement, BA may use PHI to provide Data Aggregation Services to Covered Entity as permitted by 45 C.F.R. 164.504(e)(2)(i)(B).
(43) BA may use PHI to report violations of law to appropriate Federal and State authorities, consistent with 45 C.F.R. 502(j)(1).
Appears in 1 contract
Samples: Memorandum of Agreement